Ransom

Generic.Ransom.Mespinoza.7E36BA02 (file analysis)

Malware Removal

The Generic.Ransom.Mespinoza.7E36BA02 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Mespinoza.7E36BA02 virus can do?

  • Steals private information from local Internet browsers
  • Exhibits possible ransomware file modification behavior
  • Writes a potential ransom message to disk
  • Network activity detected but not expressed in API logs

How to determine Generic.Ransom.Mespinoza.7E36BA02?


File Info:

crc32: 3AE13ED7
md5: aa64d7223561f9ba2d4a96b1755c905a
name: AA64D7223561F9BA2D4A96B1755C905A.mlw
sha1: 8e6c7618699ac39393aa01fd99848f868c0921f2
sha256: 6f3cd5f05ab4f404c78bab92f705c91d967b31a9b06017d910af312fa87ae3d6
sha512: 5e59158c987a7b29784b7988b4621fee7ff261b3148175005bbe169bbc4aa3fd35af1d50b9f64f2888f20f3e6f545dc00bda06312d9c316e9791eb0c83961ce4
ssdeep: 12288:/6Lk9wEw4+OeO+OeNhBBhhBBdpK/5Quh67ztfSafsu1F:/6Lk6RQ/+uhazB/X1
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.Ransom.Mespinoza.7E36BA02 also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 99)
CAT-QuickHealRansom.Mespinoza.R7
ALYacGeneric.Ransom.Mespinoza.7E36BA02
CylanceUnsafe
Cybereasonmalicious.23561f
SymantecRansom.Gen
ESET-NOD32a variant of Win32/Filecoder.NYO
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Ransomware.Mespinoza-9819427-0
KasperskyHEUR:Trojan-Ransom.Win32.Generic
BitDefenderGeneric.Ransom.Mespinoza.7E36BA02
MicroWorld-eScanGeneric.Ransom.Mespinoza.7E36BA02
Ad-AwareGeneric.Ransom.Mespinoza.7E36BA02
SophosMal/Generic-R
BitDefenderThetaGen:NN.ZexaF.34058.FCW@a88IJTai
TrendMicroRansom.Win32.MESPINOZA.SMDA
McAfee-GW-EditionRansom-Mespinoz!AA64D7223561
FireEyeGeneric.Ransom.Mespinoza.7E36BA02
EmsisoftGeneric.Ransom.Mespinoza.7E36BA02 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Generic.guqez
AviraHEUR/AGEN.1140496
eGambitUnsafe.AI_Score_99%
MicrosoftRansom:Win32/Aurora.SIB!MTB
GDataGeneric.Ransom.Mespinoza.7E36BA02
AhnLab-V3Ransomware/Win.Generic.R419126
McAfeeRansom-Mespinoz!AA64D7223561
MAXmalware (ai score=82)
MalwarebytesRansom.Mespinoza
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom.Win32.MESPINOZA.SMDA
RisingRansom.Agent!1.C222 (CLASSIC)
YandexTrojan.GenAsa!qoUkCes1Sac
IkarusTrojan-Ransom.Mespinoza
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Filecoder.NYO!tr.ransom
AVGWin32:RansomX-gen [Ransom]
Qihoo-360HEUR/QVM10.1.1002.Malware.Gen

How to remove Generic.Ransom.Mespinoza.7E36BA02?

Generic.Ransom.Mespinoza.7E36BA02 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment